National Cyber Security Programme The Pathfinder Training Journey

Helen Braithwaite, Local Digital Collaboration Unit, MHCLG Cyber Pathfinder Training Scheme

Developing underpinning cyber resilience knowledge

1. Cyber Landscape & Guidance and Support
2. Cyber Threats & Capability

Developing cyber resilience capability

3. People, Process, Technology & Exercise Mariana
4. Resilience Preparedness, Planning & Embedding Awareness

Integrating cyber resilience into wider incident management capability

5. Incident Management & Crisis Management & Communications
6. Business Continuity & Recovery PATHFINDER PROGRAMME: WHAT HAVE WE BEEN DOING?

Events

Exercise FINACK – January to March 2019

Pathfinder Training Days Modules 1 to 6 – February 2019 to March 2020

4 additional LRF Workshops – September to October 2019

Local Leadership in Cyber for strategic leaders in the public sector - June 2019

62 events in total and 3,600 attendees THE PATHFINDER PROGRAMME – SOME FACTS AND FIGURES

2,834 delegates have attended Exercise FINACK to Pathfinder 5

546 delegates have booked to attend Pathfinder 6 events (January to March 2020)

Over 50% of delegates represented Local Authorities

Other organisations attending include: Local Resilience Forum Secretariats, Police, Fire & Rescue Services, Health, Environment Agency, other Government Departments, voluntary sector and third party suppliers providing services to local government

100 Resilient Cities article on Cyber Pathfinder Programme – http://crisis-response.com/comment/blogpost.php?post=491 WHAT HAVE WE BEEN DOING?

Products/Guidance

Cyber Standard & Self Assessment Tool

Framework Plan

Cyber Technical Advice Cell

Cyber Lexicon

Case Studies

CyberHub on Resilience Direct

Guidance and support is available on the Cyber Hub of Resilience Direct BRINGING CYBER TO LIFE……

Learning from each other – sharing best practice;

Debriefing and evaluating feedback to change and improve content;

From your experiences we have built more detailed case studies: Wiltshire, Copeland, Kent, Staffordshire +++

Signposting and linking to other resources:

NCSC Board Toolkit, Exercise in a Box & Cyber Security Information Sharing Partnership (CiSP) Regional Organised Cyber Crime Units (ROCCUs) CPNI – Personnel and People Security Warning Advice & Reporting Points (WARPs) EXERCISE FINACK: WILTSHIRE COUNCIL - JANUARY 2020

Over 200 people attended inc: Chief Executive Officers, all 15 Directors, 45 Heads of Service, Managers, Operational Staff, Wiltshire Council Councillors and local partners.

ICT Manager from Copeland Borough Council, David Cowan and NCSC presented. THE LEARNING TELLS US THAT:

Cyber is a team sport

Strategic leaders need to be involved – but it’s difficult

Impacts of a cyber incident are wide and varied – and challenging

‘Business as usual’ local and national crisis response arrangements will work in a cyber incident

Cyber plans and emerging guidance/concepts need more testing and exercising

Case studies and sharing of experiences bring everything to life and make it real 20/21 THE FUTURE: NEXT STEPS

More training and exercising;

Embed and test plans, guidance and concepts at the local/regional/national level;

Use the RD platform to build a cyber community of interest;

Explore other platforms and ways to share learning and develop Pathfinder materials;

Research whether a National Cyber Network could support sharing learning and good practise;

Through the Pathfinder network support, exercise and inform future cyber policy development. Any Questions?

Helen Braithwaite, Local Digital Collaboration Unit, MHCLG

helen.braithwaite@communities.gov.uk philip.james@communities.gov.uk